home

m.yac.mx

Name: Registration Private

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Washington, District of Columbia within the United States which resides on the ThePlanet.com Internet Services, Inc. network.
Registrar:
GoDaddy.com

Server location:
District of Columbia, United States (US)

Root domain:
yac.mx

Whois:
1 yac.mx record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic.ELEX.Installer.Meta
100.00%

The domain m.yac.mx has been seen to resolve to the following 2 IP addresses.

184.173.128.178
184.173.128.178-static.reverse.softlayer.com
February 28, 2016

184.173.128.179
184.173.128.179-static.reverse.softlayer.com
February 28, 2016

File downloads found at URLs served by m.yac.mx.

1 / 68      (PUP)
http://m.yac.mx/.../4392835  (~dl2F88.exe)

1 / 68      (PUP)
http://m.yac.mx/.../9146618  (~dl2F88.exe)

The following 65 files have been seen to comunicate with m.yac.mx in live environments.

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeDownloader.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
Client.exe

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeDownloader.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeDownloader.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.178:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
iSafeDownloader.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 184.173.128.179:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 73 files

URL:
http://m.yac.mx/

Google Analytics:
UA-40676322

Title:
“Yet Another PC Cleaner | Lifetime Free PC Cleaner - YAC Official Website”

Description:
“YAC PC Cleaner, The Lightest & Fastest Cleaner, available for Windows 8, 7, Vista, and XP. Choose the ONE or nothing”

60boy.com

yacss.com

yknowlarge.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.